CNOE-311. Installation and Programming Manual. Niobrara Research & Development Corporation P.O. Box 3418 Joplin, MO USA

Transcription

1 CNOE-311 Application Manual CNOE-311 Installation and Programming Manual This Manual describes the installation and operation of the CNOE-311 Compact Ethernet option module. Effective: 18 March, 2008 Niobrara Research & Development Corporation P.O. Box 3418 Joplin, MO USA

2 Telephone: (800) or (417) Facsimile: (417) POWERLOGIC, SY/MAX, and Square D are registered trademarks of Square D Company. Modicon, TSX Compact Automation, Concept, ProWorx, Modbus, and Modbus Plus are registered trademarks of Schneider Automation. Subject to change without notice. Niobrara Research & Development Corporation All Rights Reserved.

3 Contents 1 Introduction Installation and Configuration...11 Module Installation...11 IP Address Configuration...11 Windows to Default IP Address...11 Manually using LCD Display...11 BOOTP/DHCP...11 MSTR s to the CNOE Default Gate and Subnet Mask...12 Software Configuration...12 Resetting to Factory Default Configuration...12 Module Configuration...12 Reloading Operating System Front Panel Operation...15 LCD Main Menu...15 Config submenu...15 Stats submenu...16 Apps submenu...16 Info submenu...16 System submenu TCP/IP Ethernet Protocol...17 IP Addressing...17 Subnet Masks...18 Default Gateway...18 Modbus TCP/IP Protocol Mode...18 Client/Server...18 Client IP Look-up Table...19 Server Index Look-up Table...19 Modbus TCP/IP Example...20 Client Operation...21 Server Operation

4 5 SY/MAX Mode MBTCP+SY/MAX Ethernet MODE...25 MBTCP+SY/MAX Example MSTR Operation...29 The MSTR Instruction...29 MSTR Diagram...30 Inputs...30 Outputs...30 Control Block Content...30 Middle Node Content...31 Bottom Node Content...31 Control Block Operation...31 Opcode 1 (Write Multiple 4x Registers)...32 Opcode 2 (Read 4x Registers)...33 Opcode 101 (Write Multiple 0x Coils)...34 Opcode 102 (Read 0x Coils)...35 Opcode 103 (Read 1x Coils)...36 Opcode 106 (Read 3x Registers)...38 Opcode 108 (Write 4x Single Register)...39 Opcode 109 (Write 0x Single Coil)...40 Opcodes 111 & 112 (Read/Write Option Module Port Configuration)...41 Opcode 512 (Reset Option Module to Factory Defaults)...44 Opcode 513 (Set Option Module IP Address)...45 Opcode 516 (Set Option Module Subnet Mask)...45 Opcode 517 (Set Option Module Default Gate)...46 MSTR Error Codes Ethernet I/O Scanner...49 Introduction...49 Configuring the Ethernet I/O Scanner Using RPCSW IP Address...49 ID...49 Timeout...49 Scan Rate...49 Register Space...50 Master (Under Read or Write)...50 Slave (Under Read or Write)...50 Cnt (Under Read or Write)...50 H/ Copying, Pasting, and Automatically Incrementing...50 Editing Global I/O Scanner Configuration...50 Ethernet I/O entries per socket Configuration Software RPCSW RPCSW Data Entry Keys

5 Online and Offline Editing Screen...55 Drop Number...55 Protocol...56 Buffer Limit...56 Mode Specific Sub-menus...56 IP Address...56 Subnet Mask...56 Default Gate...56 MBAP TCP Port...56 TCP Backoff...56 Downstream Timeout...56 Quiet Timeout...56 IP Framing...57 MAC Address...57 E-Peer...57 Transfer Interval...57 Transfer Route...57 READ Count...57 READ From...57 READ To...57 WRITE Count...58 WRITE To...58 WRITE From...58 Total E-Peer Nodes...58 This Node s Number...58 Start Register...58 Register Count...58 Destination Reg...58 Update Interval...58 Backplane Port Mode...58 MSTR Message Reply Timeout...59 Programming Channel idle timeout...59 Ethernet I/O Scanner...59 Ethernet I/O Entries Per Socket...59 HOTKEYS...59 F1 Print Screen hotkey...59 F2 Help Window...59 F3 Statistics Viewer...60 Modbus Server Routing for Ethernet Port...66 Index...66 Target TYPE...66 ROUTE...66 Ethernet I/O Scanner...66 IP Address...67 ID...67 Timeout...67 Scan Rate...67 Register Space...67 Master (Under Read or Write)...67 Slave (Under Read or Write)...67 Cnt (Under Read or Write)...67 H/ Outgoing TCP Routing...68 Drop...68 IP Address...68 Downstream Route...68 Offline Functions

6 "Read from disk to memory"...69 "Write from memory to disk"...69 "Edit configuration in memory"...69 "Edit Modbus routing"...70 "Edit ethernet I/O scan table"...70 "Edit TCP routing"...70 "Send memory to module"...70 "Fetch memory from module"...70 "Print configuration in memory"...70 "Delete configuration file"...70 "Quit offline functions"...70 Utilities...70 View registers...70 SETUP...71 Serial SETUP...71 Personal Computer COM: port...72 Modbus/TCP Connection...72 Register Viewer Setup...73 Load from File...73 Command Line Parameters Local Registers...75 Module Register Overview...75 Mailbox Registers...76 Statistics Registers...76 Ethernet Port Statistics...76 Backplane Port Statistics...78 IP Routing Table...79 TCP/IP Port Number...80 TCP/IP Step Size for Incremental Backoff...81 TCP/IP Downstream Timeout...81 TCP/IP Quiet Timeout...81 Ethernet Addresses of Known Drops Registers...81 IP Addresses of Connected Devices...82 E-Peer Active Register...83 E-Net Search...83 Modbus Slave Address Tables...83 TCP/IP Routing Table...84 Setup and Configuration Registers...85 Ethernet Port Control Registers...85 Backplane Port Control Registers...86 Options...87 Clear Function Register...88 Module Identification Registers...88 Global Options Register (Register 8190)...89 Global Options Connector Pinouts BaseT (Twisted Pair) Ethernet port on CNOE-311 (RJ45 socket)...91 Appendix A Modbus/TCP Protocol Specifications

7 Appendix B NR&D Internet Access Figures Figure 1-1 CNOE-311 Front Panel...9 Figure 2-1 RPC Load of CRPC...13 Figure 4-1 RPCSW32 TCP Routing Table...19 Figure 4-2 RPCSW32 Modbus Server Routing Table...20 Figure 4-3 Modbus TCP/IP Example...20 Figure 4-4 TCP/IP Ethernet MSTR Example...22 Figure 6-1 MBTCP+SY/MAX Routing Example...27 Figure 7-1 MSTR Block Diagram...30 Figure 7-2 Sample MSTR...32 Figure 9-1 RPCSW32 Startup Screen...54 Figure 9-2 RPCSW32 offline Menu...54 Figure 9-3 RPCSW32 online Edit Screen...55 Figure 9-4 F1 Print Screen...59 Figure 9-5 F2 Help Window...60 Figure 9-6 Ethernet Port Statistical Screen (Page 1)...60 Figure 9-7 Ethernet Port Statistical Screen (Page 2)...61 Figure 9-8 Ethernet Port Statistical Screen (Page 3)...61 Figure 9-9 Backplane Port Statistical Screen (Page 1)...63 Figure 9-10 Backplane Port Statistical Screen (Page 2)...63 Figure 9-11 Backplane Port Statistical Screen (Page 3)...64 Figure 9-12 Modbus Server Routing for Ethernet Port...66 Figure 9-13 Edit Auto-Scan Table...67 Figure 9-14 Edit TCP Routing...68 Figure 9-15 offline Read from Disk to Memory...69 Figure 9-16 View Registers...71 Figure 9-17 MODBUS/TCP Setup Screen...72 Figure 9-18 Terminal Emulator Setup Screen...73 Figure 11-1 Ethernet Port RJ Tables Table 4-1 IP Network Classes...18 Table 4-2 Default subnet masks...18 Table 4-3 Modbus/TCP MSTR Example...21 Table 4-4 Modbus Routing for the CNOE-311 E-net port...21 Table 6-1 CNOE-311 IP Table Example...26 Table 6-2 Server Index Table For CNOE Table 6-3 Model 450 Routing Examples...26 Table 6-4 NOE Routing Examples...26 Table 7-1 Supported MSTR Opcodes...29 Table 7-2 Supported MSTR Opcodes...31 Table 7-3 Opcode 1 to Modbus/TCP Target...32 Table 7-4 Register Correlation...32 Table 7-5 Opcode 2 Read from Modbus Serial Target on Port

8 8 Table 7-6 Register Correlation...34 Table 7-7 Opcode 101 to Modbus/TCP Target...34 Table 7-8 Bit Correlation between PLC and Target...35 Table 7-9 Opcode 102 Read from Modbus Serial Target on Port Table 7-10 Bit Correlation between PLC and Target...36 Table 7-11 Opcode 103 Read from Modbus/TCP Target...37 Table 7-12 Bit Correlation between PLC and Target...38 Table 7-13 Opcode 106 Read from Modbus/TCP Target...39 Table 7-14 Register Correlation...39 Table 7-15 Opcode 108 Write to Modbus Serial Target on Port Table 7-16 Register Correlation...40 Table 7-17 Opcode 109 to Modbus/TCP Target...40 Table 7-18 Bit Correlation between PLC and Target...41 Table 7-19 Opcodes 111 & 112 Read/Write Option Module Port Configuration...41 Table 7-20 Ethernet Port Control Registers...42 Table 7-21 Ports 1 and 2 Configuration Registers...43 Table 7-22 Ports 1 and 2 Configuration Registers (Continued)...44 Table 7-23 Backplane Port Configuration Registers...44 Table 7-24 Opcode 512 Reset Option Module to Factory Defaults...45 Table 7-25 Opcode 513 Set Option Module IP Address...45 Table 7-26 Opcode 516 Set Option Module Subnet Mask...46 Table 7-27 Opcode 517 Set Option Module Default Gate...46 Table 7-28 MSTR Error Codes...47 Table 8-1 Diagnostic Block Error Codes...51 Table 10-1 Module 4x Register Overview...76 Table 10-2 SY/MAX Ethernet Port Statistics Registers...77 Table 10-3 TCP/IP Ethernet Port Statistics Registers...78 Table 10-4 Backplane Port Statistics Registers...79 Table 10-5 IP Router Table...80 Table 10-6 Ethernet Physical Address Registers...82 Table 10-7 IP Address of connected Sockets Registers...83 Table 10-8 Modbus Slave Address Table...84 Table 10-9 Modbus Slave Starting Address Register...84 Table Outbound TCP/IP Routing Table...85 Table Module Setup Identification Registers...85 Table Ethernet Port Control Registers...86 Table Backplane Port Configuration Registers...87 Table Options Register Values...87 Table Clear Function bit-map...88 Table Module Identification Registers...89 Table Module ID Example...89 Table Global Options Register Values...90 Table BaseT Pinout...91

9 1 Introduction The Niobrara CNOE-311 is a TSX Compact option module that makes it possible for a Compact PLC to communicate with devices on an Ethernet network. The PLC can be programmed via Ethernet, and the PLC can issue MSTR instructions to other devices on the network. The ethernet port is a 10baseT port, and can be connected to a standard ethernet hub. The port can be configured for Modbus/TCP, SY/MAX 802.3, or a combination of these two protocols. The CNOE-311 must be mounted in the primary Compact rack, and can be mounted in slot 3, 4, or 5. Note: The CNOE-311 will only function with the 386-based Compact Controllers, which are part numbers PC-E , -265, -275, and Additionally, these controllers must be loaded with Exec version 2.07D or later, which will allow the PLC to support option modules. NR&D CNOE LCD Display PLC:HLT Left Right Up Down Enter / Select Securing Screw Ethernet Link/Activity LED 10BaseT Ethernet Port Ethernet 100Mb LED Module Release Lever Figure 1-1 CNOE-311 Front Panel CNOE-311 Application Manual 1 Introduction 9

10

11 Installation and Configuration 2 Module Installation IP Address Configuration 1 Make sure the Compact rack is powered down! 2 Mount the CNOE-311 in an available slot in the primary rack. Secure the screw at the bottom of the module. The CNOE-311 comes with a default IP address of A PC on the network running Windows ME/2000/XP can very easily add an additional IP address to an existing adapter, and configure a new IP address using RPCSW32. The CNOE-311 can obtain an IP address via the front panel, via BOOTP or DHCP, or from the PLC using MSTR instructions. At some point in the future, Concept may also support config extensions for Compact PLC s. Windows to Default IP Address In the Control Panel of Windows there is an icon for setting up network adapters. Within the setup for adapters is a setting for the properties of TCP/IP. Within the properties, there is an "Advanced" setup button. Click on this button, and add a new IP address of This should be accompanied by a default subnet mask of The PC can now connect to the CNOE-311 as described in the RP- CSW32 chapter. Manually using LCD Display The IP address of the CNOE-311 can be set through the LCD Menu and the front panel switches. Press the right, up, down or enter button will bring up the Main Menu. Using the front panel buttons select the Config menu, then the Comms menu, then Ethernet, then Address. Using the right and left buttons to select the octet to adjust and the up and down buttons to scroll the value of the octet selected. Hold down the button for faster scrolling. The Mask and Gateway may also be set in a similar manner. BOOTP/DHCP The CNOE-311 can get its IP address from any BOOTP or DHCP server on the network. It will also support BOOTP Lite, available from Modicon. Unless the feature is disabled, the CNOE-311 will attempt to obtain a new IP address each time power is cycled. To disable, the user must connect with RPCSW32, and edit the port s parameters, or the register may be directly edited from any available register viewer. The register that controls this option is listed in the port parameters section of the local registers list. CNOE-311 Application Manual 2 Installation and Configuration 11

12 MSTR s to the CNOE-311 The CNOE-311 may also get its IP address from MSTR instructions written directly to the CNOE-311. The user would program an MSTR block where the opcode is 513, the high byte of the fourth implied register is the slot number of the CNOE-311, and the fifth through eighth implied registers contain the four bytes of the IP address. This will be explained in further detail in the sections covering MSTR instructions. Default Gate and Subnet Mask Software Configuration If required, the CNOE-311 can obtain a default gate and subnet from any of four sources: BOOTP/DHCP servers, manually using LCD Display, RPCSW32, or MSTR instructions. A BOOTP or DHCP server will normally hand these values to the CNOE-311 at the same time as the IP address. Once an IP address is established, a user may connect to the CNOE-311 using RPCSW32, and edit the parameters for the Ethernet port. If MSTR s are used, the opcodes are 516 for subnet mask and 517 for default gate, in the same format as described for setting the IP address. Since the CNOE-311 is an option module, it really is not necessary to configure it within any software package. Additionally, at the writing of this manual, no programming package supports option modules for the Compact PLC. Contact Modicon for new releases of Concept or ProWorx. Resetting to Factory Default Configuration Module Configuration The CNOE-311 can be reset it back to factory default configuration using the LCD menus and the front panel buttons. To accomplish this, press the right, up, down or enter button to bring up then Main menu, then select System, then Factory, then Defaults. The default values will be set and the unit will reboot. Each port of the CNOE-311 is independently configured for the desired drop number, baud rate, number of data bits, parity bit, protocol mode and other parameters. Modification of the configuration registers may be accomplished by writing to them with any device capable of generating Modbus/TCP write messages but is most conveniently accomplished with the Win32 console program RPCSW32, which is provided with the module at no cost. RPCSW32 must be used through the Ethernet port configured as Modbus/TCP. The configuration and mailbox registers are maintained in volatile memory. If power is removed from the device the setup information will be lost unless it is written to EEPROM. This can be done with the RPCSW32 software in the Utilities menu. The setup information entered with the manual key pad is automatically written to EEPROM. Each port must have certain parameters configured for proper operation. These parameters include: Ethernet Drop Number - The Ethernet Drop Number must fall within the range of 00 through 99. This number is not used if the port is only set up for Modbus/TCP. If SY/MAX or MB- TCP+SY/MAX mode is used, this number must be unique from all other SY/MAX Ethernet units on the network. If two SY/MAX Ethernet ports have the same Ethernet Drop Number, they will stop communicating and must be manually reset. The factory default Ethernet Drop Number is 00. Protocol Mode - The Protocol setting controls the operation of the Ethernet Port. Possible values for the Ethernet port are SY/MAX 802,,Modbus/TCP, and MBTCP+SY/MAX. IP Address - The IP address for the Ethernet port must be set when Modbus/TCP or MB- TCP+SY/MAX is selected. The IP address must be unique for a given network and should be provided by the network administrator. Subnet Mask - The subnet mask must be configured in Modbus/TCP or MBTCP+SY/MAX modes for the specific network installed. Consult your network administrator for the proper subnet mask. 12 Installation and Configuration 2 CNOE-311 Application Manual

13 Reloading Operating System Default Gate - The default gateway will be the IP address of the gateway router for the subnet that the CNOE-311 is installed upon. If all IP traffic is local to the physical network, this value may be left at Buffers - The Buffers setting reflects the number of internal message buffers allocated to the Ethernet port. The possible range is 2 to 32 buffers. The factory default value is 32. There is seldom a need to adjust the number of buffers available to a port. Figure 2-1 RPC Load of CRPC Start RPCLOAD.EXE Click on the Browse button and select the file crpctcp.qrc. Select the Application 1 Radio Button. Verify the following: Status Register = 1. Run Pointer Register = 33. Auto Start is checked. Erase Flash is checked. Load File is checked. The Modbus/TCP tab is selected. * The IP Address of the QUCM is entered correctly. * The TCP Port number is set to 502. * The Modbus Drop is set to 255. Press the Start Download button. RPCLOAD will open a progress window to show the status of the download. CNOE-311 Application Manual 2 Installation and Configuration 13

14

15 3 Front Panel Operation The front panel of the CNOE-311 has an LCD and five buttons which can be used to do initial setup and to view statistics about communications. Pressing the right, up, down, or enter button will turn on the back light and bring up the Main menu. In the Main menu there are five choices or submenus. Config, Stats, Apps, Info, System. To back out of any choice or submenu use the left arrow key (in the Stats menu use the enter or return key). LCD Main Menu Config - The Config submenu allows configuration of the communication ports, set the display contrast, and to adjust the clock. See the Config submenu below for more information. Stats - The Stats submenu allows the viewing of several useful statistics on each port, and the back plane. See the Stats submenu below for more information. Apps - The Apps submenu allows the setting of the application switches to run, halt, or memory protect modes. See the Apps submenu below for more information. Info - The Info allows the viewing MAC Address, the serial number, and the version of the software and firmware in the CNOE-311. See the Info submenu below for more information. System - The System submenu allows the system to be rebooted, set to factory default configuration, and set a password for the system. See the System submenu below for more information. Config submenu Comms - Set up the communications port using the up and down keys to select the serial ports or the ethernet port. Ethernet - Choose to set up ethernet port configuration. Select using the right arrow or the enter key. * Address - Use the right and left buttons to select the octet to adjust and the up and down buttons to scroll the value of the octet selected. Hold down the button for faster scrolling. The Mask and Gateway may also be set in a similar manner. * Mask - Use the up and down keys adjust the subnet mask. The octets will increment and decrement according to the classless inter-domain routing notation. If different values are required use RPCSW32 software to set these values. * Gate - The set up for the gateway is the same as setting the address above. CNOE-311 Application Manual 3 Front Panel Operation 15

16 Serial ports - Not used in the CNOE-311. Display - Sets the contrast of the LCD screen. Use the up and down keys to adjust. Left arrow or enter keys exits the menu. Clock - Sets the internal clock of the CNOE-311. Use the left and right keys to select the hours, minutes, seconds, day of the week, day date, month, or year. Use the up and down keys to adjust the values. Enter exits this menu. Stats submenu Backplane - The statistics veiwable on the backplane are end of scan hooks, memory access messages sent to PLC, backplane MB channel messages without logon, backplane MB channel messages with logon, buffers currently in use, buffers in the internal queue. Ethernet - The statistics viewable on the ethernet port are the number of open sockets, number of ethernet frames transmitted, number of ethernet frames received, number of ethernet collisions, number of buffers currently in use, number of buffers currently in internal queue. Apps submenu Switch 1 and Switch 2 - This section allows the setting of the application switches in the CNOE Switch 1 controls the RUN, HALT or MEMORY PROTECT for Application 1. Switch 1 and switch 2 should always be placed in RUN or MEMORY PROTECT. Placing switch 1 in HALT could cause the loss of communication with the PLC or computer. Placing switch 2 in HALT will cause the automatic scanning of the serial ports to stop. Info submenu MAC Add - This section allows viewing the MAC address of the CNOE-311. Serial # - This section allows viewing the serial number of the CNOE-311. Versions - This section allows viewing the date of the Boot firmware, CUCM Operating System firmware, and the CRPC software. System submenu Reboot - Selecting this option causes a reboot of the CNOE-311. Any configuration done manually through the front panel will be kept (written to EEPROM or FLASH automatically). Any configuration done through RCPSW32 will be lost unless it is written to FLASH or EEPROM. Factory - Selecting this option causes the CNOE-311 to set the system to their factory default values then the system does a reboot. All configuration will be set to factory default values. Password - Selecting this option allows a number password to be set in the CNOE Front Panel Operation 3 CNOE-311 Application Manual

17 TCP/IP Ethernet Protocol 4 IP Addressing The Internet suite of protocols is commonly referred to as TCP/IP and includes IP, UDP, TCP, SNMP, Telnet, FTP, TFTP, SMTP, and NFS. The Internet Protocol (IP) is a network layer protocol that provides for packet delivery of all other protocols in the TCP/IP family. It does not provide for guaranteed delivery of packets, proper sequencing of the arrival of packets, or error detection. These features are provided by a higher level protocol such as TCP. Transmission Control Protocol (TCP) is a connection-oriented means of delivering packets over IP. It provides for the error-free delivery, and proper sequencing of packets from the source to the destination. The application can simply hand a message to TCP and TCP will make sure that it arrives at the target. The CNOE-311 uses TCP/IP to send Modbus/TCP packets across the Ethernet. User Datagram Protocol (UDP) does not provide for a reliable connection and relies on the application layer for error correction and sequencing. SNMP is the simple network management protocol. FTP is the file transport protocol and TFTP is the trivial file transport protocol. SMTP is the simple mail transport protocol while Telnet is a terminal emulation protocol and NFS is the network file system. The CNOE-311 does not directly support or respond to UDP, SNMP, FTP, TFTP, SMTP, or NFS packets although the internal IP router will process (route) these messages. The CNOE-311 does support a single telnet connection. The CNOE-311 also provides some support for two other protocols in the TCP/IP suite: address resolution protocol (ARP) and internet control message protocol (ICMP). ARP is used to determine the 48- bit globally unique address of the source and destination Ethernet devices. The RPC-TCP provides ICMP echo request and echo reply support. The ping utility uses these ICMP messages to determine if a particular IP node is functional. Every node on a TCP/IP network has a unique IP address. This 32-bit value is typically represented in decimal notation where each byte of the address is displayed in decimal separated by periods (dotteddecimal). For example, a host on Niobrara s network might have the address CEDF331E (hex) is normally displayed as in dotted-decimal notation. A 32-bit IP address includes both the network ID and host ID for a node. The network ID specifies the network to which the node is attached. The network ID must be unique among all networks within a connected internet. On networks connected to the public Internet, this ID is provided by the InterNIC or DDN-NIC. The host ID identifies the node within its network. Each node must have an unique host ID within a network. CNOE-311 Application Manual 4 TCP/IP Ethernet Protocol 17

18 The Internet has been defined address classes to support different network sizes. Each network class is determined by the first byte of the IP address. Table 4-1 displays the IP classes a nd the total number of network and host IDs for each address class. The example is address w.x.y.z and network address 127 is reserved for loopback testing and interprocess communication on the local computer; it is not a network address. Net and Host IDs 0 and 255 are are also reserved. Table 4-1 IP Network Classes Class w values Net ID Host ID Available nets Available Hosts per net A w x.y.z ,777,214 B w.x y.z 16,384 65,534 C w.x.y z 2,097, Subnet Masks Subnet masks are 32-bit numbers that allow nodes to determine the network ID from the Host ID. Subnet masks are determined by assigning 1 s to bits that belong to the network ID and 0 s to the bits that belong to the host ID. The result is normally displayed in dotted decimal notation. Table 4-2 displays the default subnet masks for the three Internet classes. Table 4-2 Default subnet masks Class Default subnet mask A B C NOTE: All devices on a physical network should use the same subnet mask and network ID. Default Gateway If a destination IP address is not on the local physical network (the address does not match the subnet mask), the host must send the message to a gateway IP router. This router will know where to send the message on the other network so that it will eventually reach the destination. Typically each local network will only have one (default) gateway. Port Number Modbus TCP/IP Protocol Mode Modbus TCP/IP uses the "well known" port number of 502 decimal and is fixed to this value. The Modbus/TCP Protocol is enabled by setting the Protocol Mode of the Ethernet Port from SY/MAX 802 to Modbus/TCP or MBTCP+SY/MAX. The Modbus TCP protocol mode is compatible with the Modicon TSX Quantum NOE 211 TCP/IP Ethernet module, Modsoft 4.0 or later, Concept programming software, and many third party HMI packages. Each Modbus TCP node on the IP network must have a unique IP address. Client/Server TCP/IP implementations are of the Client/Server nature. A Server waits for connection requests from Clients; i.e. the Client is the node that initiates the connection to the Server. The CNOE-311 can be both a Client and a Server at the same time. When the CNOE-311 routes a command from the PLC to the Ethernet port, it becomes a Client and a TCP/IP connection is formed between the Client and the target Server. The target Server is determined 18 4 TCP/IP Ethernet Protocol CNOE-311 Application Manual

19 through the use of the implied registers in the MSTR block. The message command is translated into the Modbus TCP protocol and sent out the Ethernet port. with the Destination Index set by the third implied register in the MSTR block. When the CNOE-311 forms a connection as a Server and receives a command from the Client, it translates the Modbus TCP message into SY/MAX (or Modbus...), and routes it either to the PLC, or can be routed back out the Ethernet port to another Ethernet device via Modbus/TCP or SY/MAX The reply is in-turn translated into Modbus TCP and sent back to the Client. Client IP Look-up Table If translating messages from SY/MAX to Modbus/TCP, the CNOE-311 must be given a route that points the message out to the appropriate Ethernet device. The CNOE-311 inspects the drop in the route following the E-net drop number for an entry in its IP look-up table. If there is an entry in the table, the command is translated into Modbus TCP and sent to the appropriate Server, otherwise, an error reply is sent to the source of the command. If the optional downstream route is included in the IP table entry, only the last drop in the route is inserted in the command as the index value. Figure 4-1 RPCSW32 TCP Routing Table Figure 4-1 provides a view of a portion of this routing table from the RPCSW32 edit TCP screen for the CNOE-311. Server Index Look-up Table The Modbus TCP/IP protocol only includes one drop of routing information in the message structure, this drop number is called the Destination Index. The CNOE-311 inspects this index on all incoming Modbus TCP/IP messages and if there is an entry in its look-up table, uses the route in the table for the downstream route. The ability to communicate with the Compact processor is subject to this table. One of the entries in this table must include a route that is the drop number of the backplane "port." The other 254 entries may be used to bridge Modbus/TCP and SY/MAX devices. CNOE-311 Application Manual 4 TCP/IP Ethernet Protocol 19

20 Modbus TCP/IP Example Figure 4-2 RPCSW32 Modbus Server Routing Table Figure 4-2 provides a view of a portion of this routing table from the RPCSW32 edit Modbus Routing screen. In this example, the CNOE-311 has an IP address of , and a Subnet Mask of It is connected to an Ethernet network through a hub with two Quantum NOE-211 Ethernet modules and a personal computer running Modsoft. The CNOE-311 will be configured for both Client and Server operation to allow the personal computer to program any of the PLCs as well as allowing any PLC to access data in any other PLC using the MSTR programming block. Quantum NOE Quantum NOE Concept Computer Hub Twisted Pair Ethernet to the NOE. Figure 4-3 Modbus TCP/IP Example The Ethernet port of the CNOE-311 is connected to a hub along with two Compact TCP/IP Ethernet modules (NOE-211). Each NOE has its own IP address, subnet mask, and default gateway as defined in the Compact PLC setup There is also a personal computer running Modsoft with a TCP/IP stack and its IP address is TCP/IP Ethernet Protocol CNOE-311 Application Manual

21 Client Operation For the CNOE-311 to act as a client, the user simply programs MSTR blocks to point at the Quantums on the network. The MSTR will be programmed as below # MSTR # Register Value Description Opcode Error Status Number of registers Remote Address x0300 High byte = slot number IP byte IP byte IP byte IP byte 4 Table 4-3 Modbus/TCP MSTR Example Server Operation The CNOE-311 may also act as a Modbus TCP/IP Server to allow the Quantums with NOEs and the Modsoft computer with TCP/IP to access the Compact on its Ethernet port. The CNOE-311 uses a 256 entry look-up table to map the Destination Index of the incoming messages to downstream routes. Table 4-4 displays the Modbus Server routing for the CNOE-311 in this example. Destination Index 0 will point to the Compact. This is the default configuration in the CNOE-311. If the backplane drop number is altered, index 0 s route must also be altered to match. Table 4-4 Destination Index 0 1 Modbus Routing for the CNOE-311 E-net port Route Figure 4-4 displays a MSTR block and its associated configuration registers for performing a read of Holding registers though in the Compact from one of the Quantums with the NOE in Slot #6 of the Compact Rack. CNOE-311 Application Manual 4 TCP/IP Ethernet Protocol 21

22 MSTR # Register Value (Dec) Description Read Command Error Status Length Remote Register (hex) MSB=Head Slot, LSB=Dest.Index IP Address MSB of MSW IP Address LSB of MSW IP Address MSB of LSW IP Address LSB of LSW Figure 4-4 TCP/IP Ethernet MSTR Example Notice that the value in register is shown in hexadecimal where the upper byte is 06 and the lower byte is 00. The upper byte (MSB) is the slot number of the Compact rack where the NOE is located and in this case slot 6. The lower byte (LSB) is the Destination Index for the outbound TCP/IP message. The value of 00 in the LSB selects Destination Index 00 which points to the downstream route that leads to the Compact. The Destination Index in the Quantum may be any value between 0 and FF hex (0-255) inclusive TCP/IP Ethernet Protocol CNOE-311 Application Manual

23 5 SY/MAX Mode The SY/MAX Ethernet protocol is a robust industrial process control communication protocol developed by Square D Company. The CNOE-311 allows a Compact PLC to appear on a SY/MAX network. The SY/MAX protocol on the 10Mb/s Ethernet allows for high data rates, as the CNOE-311 can process in excess of 26k registers/second. This protocol is defined by the Instruction Bulletin # A1, SY/MAX Communications Protocol and is available only from Square D. The SY/MAX protocol is implemented in a variety of devices including Square D Model 450 and Model 650 PLCs, Square D software SFW390/391 for DEC VAX/VMS computers, Square D SFI610 Ethernet driver for personal computers, Niobrara EPE5, MEB, CNOE-311, and others. The SY/MAX protocol is primarily intended for closed industrial control networks although it will co-exist with other Ethernet protocols such as TCP/IP, DECnet, and Novel on the same physical network. Many production facilities will install an independent Ethernet for process control to provide an additional measure of security. (You don t want someone in Accounting removing a coax terminator and causing the assembly line to come to a screeching halt). Because it was developed for industrial control, this protocol has some limitations: Only 100 devices may connected to the same network. Although it supports up to 8 drops of SY/MAX routes, the protocol is not Ethernet routeable; it will only pass through multi-protocol bridges and repeaters. Because of this, SY/MAX is not suitable for WAN. Because it is a proprietary protocol, only a limited number of softwares support it. When wide area networking is necessary, use the Modbus TCP/IP protocol as described in the next chapter. It uses the TCP/IP protocol and may be routed across IP only routers. Modbus/TCP is openly published and is available on the Internet at NOTE: The most important thing to remember about SY/MAX Ethernet is to set each device to its own unique number between 00 and 99. CNOE-311 Application Manual 5 SY/MAX Mode 23

24

25 MBTCP+SY/MAX Ethernet MODE 6 MBTCP+SY/MAX Example The MBTCP+SY/MAX ethernet mode is a combination of the SY/MAX and Modbus TCP modes to allow the integration of remote SY/MAX and Modbus TCP devices on the same ethernet network. As a server only, the CNOE-311 will act exactly as it does in each mode separately. As a client, the CNOE-311 inspects the drop in the route following the drop number of the ethernet port for an entry in the IP lookup table. If there is an entry in the table, the CNOE-311 translates the command to Modbus TCP, and sends it to the appropriate server. If there is no entry in the table, the command is translated to SY/MAX 802.3, and routed to the appropriate device. In this example, the CNOE-311 s E-net port has a Drop number of 20 with an IP address of , Subnet Mask of , and a Default Gateway of An EPE5-D is on the same local network. Its E-net port has a drop number of 26. Port 3 is in SY/MAX mode with a drop number of 103. A Model 400 PLC is connected to this port. A Model 450 is connected to the same local network as the EPE5-TCP. Its ethernet s drop number is 24. A Model 650 is also connected to the local network. Its ethernet s drop number is 22. A Modicon Quantum NOE and Processor are connected to the same local network. The NOE s IP address is An ECM2000 is also connected to the same local network. It s IP address is Attached to the ECM s serial port are two Powerlogic CM s. Their addresses are 2 and 1, respectively. Since the CNOE-311 can be a client in this example, we need to configure its TCP table. So by setting the CNOE-311 s entries 22 through 26, we can use the rest of the route of the incoming message to reach the downstream devices. CNOE-311 Application Manual 6 MBTCP+SY/MAX Ethernet MODE 25

26 Table 6-1 CNOE-311 IP Table Example Drop IP Address Route NONE NONE NONE NONE NONE Table 6-2 Server Index Table For CNOE-311 Drop TYPE Route 1 OTHER 20,22 2 OTHER 20,24 3 OTHER 20,26,103 The routes required to be set in the Model 450 to reach the target devices are shown in Table 6-3. Table 6-3 Model 450 Routing Examples Target Route CNOE ,20 CM #1 on ECM ,20,20,25,1 CM #2 on ECM ,20,20,25,2 EPE5-D 24,26 Model ,26,103 NOE 24,20,20,23,0 Model ,22 Table 6-4 NOE Routing Examples Target IP Address Index Model Model Model Compact PLC Circuit Monitor # MBTCP+SY/MAX Ethernet MODE CNOE-311 Application Manual

27 The first drop in the Model 450 s route is always 24, since that is its own ethernet port. If a Modbus TCP message is desired, the second drop in the route must always be 20, the drop number of the CNOE-311 s ethernet port. In this case, the third drop in the route will also be 20, indicating a route back out of the CNOE-311 s ethernet port. The fourth drop in the route will point to the IP table of the CNOE-311. If the corresponding index in the IP table contains an IP address, the message will be translated to Modbus TCP, and sent to the device with that IP address. The last drop in the route will be an index that the target device uses for further routing. If it is desirable for the NOE to access SY/MAX devices on the network, it can simply connect to the CNOE-311, and use the index in the Modbus Routing table to route to the proper device. For exam- SERIAL CONNECTIONS Green IN+ White IN- Red OUT+ Black OUT- Figure 6-1 MBTCP+SY/MAX Routing Example Quantum NOE 10BaseT ETHERNET CNOE-311 SERIAL TX SERIAL RX E-NET ACT ERROR LINK PEN PowerLogic - Ethernet Interface G (+)L (-)N Drop = 20 Hub Twisted Pair Ethernet to the NOE and ECM. Add=02 Add=01 MCA485 PowerLogic PowerLogic EPE5-D Model 400 Model 450 Model 650 EPE5 PLUS E-net Act SY/MAX 400 SY/MAX 450 SY/MAX 650 E-net Err Active Busy Error Drop = E-Net Drop = 26 CC100 or DC1 Cable ThinWire Cable E-Net Drop = 24 E-Net Drop = 22 CNOE-311 Application Manual 6 MBTCP+SY/MAX Ethernet MODE 27

28 ple, if the NOE needs to access the Model 650, it connects to , and uses index 1. Index 1 in the Modbus routing table is a route of 20,22, causing the message to route back out the E-net port using SY/MAX to device 22. If the NOE needs to access the Model 450 or the Model 400, it accesses the same IP address, then uses index 2 or 3, respectively. Note that entries 22,24, and 26 in the TCP table of the CNOE-311 must be for the outbound message to be SY/MAX MBTCP+SY/MAX Ethernet MODE CNOE-311 Application Manual

29 7 MSTR Operation The MSTR Instruction The MSTR instruction allows the Compact PLC to read or write registers in other devices connected to any port on the CNOx-xxx. The following table lists the opcodes available for use in the CNOx-xxx. Table 7-1 Supported MSTR Opcodes MSTR Operation MSTR Opcode (Decimal) Actual Modbus Opcode (Decimal) Write 4x registers 1 16 Read 4x registers 2 3 Write 0x coils Read 0x coils Read 1x discretes Read 3x registers Write 4x single register Write 0x single coil Read option module port configuration 111 N/A Write option module port configuration 112 N/A Reset option module to factory defaults 512 N/A Set option module IP address 513 N/A Set option module subnet mask 516 N/A Set option module default gate 517 N/A NOTE: This list may grow as new developments are made. Check the latest version of this manual at NOTE: The MSTR Opcodes above 100 are Niobrara Module specific and may not be directly supported by Modicon Programming Software such as Concept or Proworx. It may be necessary to edit CNOE-311 Application Manual 7 MSTR Operation 29

30 MSTR Diagram the MSTR configuration registers with a data viewer if the programming package complains that the opcode is not supported. NOTE: A maximum of four MSTR instructions can be active at any given time. More than four may be set active by the ladder logic, but only the first four will execute. As MSTR blocks release the resources of the option, the next MSTR s will use those resources, and execute. It should be noted that the "Active" output from the MSTR block will not turn on until the associated MSTR begins to execute. Below is a diagram of the MSTR block. It has two inputs and three outputs. MSTR Enable Terminate MSTR Control Block Data Area MSTR Length MSTR is "Active" Error MSTR was successful Figure 7-1 Inputs MSTR Block Diagram The MSTR block has two inputs: Enable and Terminate. Enable activates the MSTR and it must remain latched on until either the Error output or MSTR was successful output become true. If the Enable is turned off before the MSTR is completed then the reply data will be discarded by the CNOE. Terminate will deactivate the MSTR before a completion or error. Outputs The MSTR block has three possible outputs: Active, Error, and Success. Active will be high while the MSTR is activated. If it is the fifth or higher in a string of five or more MSTR s, this will not be high until a preceding MSTR releases the resources required by receiving a response or terminating in an error. Error will go high if the MSTR is terminated, or if an error occurs during the operation. The corresponding error code will be placed in the first implied register of the MSTR control block by the CNOE. Success will go high when the MSTR completes successfully. Control Block Content The 4x register assigned in the top node of the MSTR block will be the starting register for the control block of the the MSTR. The control block structure differs according to the network (in this case TCP/IP) and opcode being used. The control block structures for the different opcodes are as follows: 30 7 MSTR Operation CNOE-311 Application Manual

31 Table 7-2 Supported MSTR Opcodes Register Opcode 512 Opcodes 1,2 and Modbus/TCP Opcodes 1,2 and SY/MAX and Serial Ports Opcodes 513,516,517 Opcodes 111,112 Displayed Opcode Opcode Opcode Opcode Opcode First implied Error Status Error Status Error Status Error Status Error Status Second implied Unused Number of points transferred Number of points transferred Unused Unused Third implied Unused Remote Address Remote Address Unused Unused Fourth implied High byte = Option Slot # Low byte = Unused High byte = Option Slot # Low byte = Destination Index Fifth implied Unused High byte = Must be 0 Low byte = IP byte 1 Sixth implied Unused High byte = Must be 0 Low byte = IP byte 2 Seventh implied Unused High byte = Must be 0 Low byte = IP byte 3 Eighth implied Unused High byte = Must be 0 Low byte = IP byte 4 High byte = Option Slot # Low byte = Unused High byte = Length of Route Low byte = Route 1 High byte = Route 2 Low byte = Route 3 High byte = Route 4 Low byte = Route 5 High byte = Route 6 Low byte = Unused High byte = Option Slot # Low byte = Unused High byte = Unused Low byte = IP byte 1 High byte = Unused Low byte = IP byte 2 High byte = Unused Low byte = IP byte 3 High byte = Unused Low byte = IP byte 4 High byte = Option Slot # Low byte = Unused Port # 0 = Ethernet 1 = Serial Port 1 2 = Serial Port 2 3 = Backplane Unused Unused Unused Control Block Operation Middle Node Content The 4x register entered in the middle node of the MSTR block is the first register in a group of consecutive registers that make up the data area. If the MSTR Opcode is a READ opcode, these registers will be the destination for the data. If the Opcode is a WRITE opcode, these registers will be the source for the data. Bottom Node Content This is an integer value that specifies the length of the data area specified in the middle node. This must be a value in the range The following examples use this MSTR block with the Control Block starting at 40100, the Data Block at and a maximum count of 20 words. The MSTR is activated when goes high. The MSTR s top output activates , which latches the MSTR on until it is broken by either the MSTR s error output or its "successful" output. This prevents the MSTR from losing the reply coming from the downstream device. CNOE-311 Application Manual 7 MSTR Operation 31

32 MSTR Enable MSTR is "Active" Terminate MSTR # Error MSTR successful Figure 7-2 Sample MSTR Opcode 1 (Write Multiple 4x Registers) MSTR Opcode 1 generates a Modbus opcode 16 multiple register write to the target 4x registers. The data will come from the PLC 4x registers designated by the middle node of the MSTR. The target 4x registers are determined by the third implied register in the control block. The second implied register gives the number of registers transferred by the write. Table 7-3 shows the Control Block Registers for a CNOE-311 in PLC Slot 3 writing the values from PLC registers through to a Modbus/TCP device at IP Address , Modbus/TCP Index 1, and remote registers through Table 7-3 PLC Control Block Register Opcode 1 to Modbus/TCP Target Value (Decimal) Value (Hex) Description MSTR Opcode 1, 4x Write N/A N/A Error Status Number of registers written F5 Remote 4x register High byte = Slot 3, Low byte = Target Index = C0 Target IP Address A8 Target IP Address Target IP Address C Target IP Address Table 7-4 gives the correlation of PLC registers to the remote 3x register after the read is completed. Table 7-4 Register Correlation PLC Register Remote Register MSTR Operation CNOE-311 Application Manual

33 Opcode 2 (Read 4x Registers) MSTR Opcode 2 generates a Modbus opcode 3 multiple register read from the target 4x registers. The data will show up in the PLC 4x registers designated by the middle node of the MSTR. The target 4x registers are determined by the third implied register in the control block. The second implied register gives the number of registers transferred by the read. Table 7-5 shows the Control Block Registers for a CNOE-800 in PLC Slot 4 reading the values from a Modbus serial device on CNOE port 1 drop 101, Modbus target slave address 29, and remote registers through Table 7-5 Opcode 2 Read from Modbus Serial Target on Port 1 PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 2, 4x Read N/A N/A Error Status Number of registers read E9 Remote 4x register High byte = Slot 4, Low byte = not used High byte = Number of drops in route = 2, Low byte = First drop in route = D00 High byte = Second drop in route = 29 Low byte = Third drop in route =Not used High byte = Fourth drop in route = Not Used Low byte = Fifth drop in route =Not used High byte = Sixth drop in route = Not Used Low byte = Seventh drop in route =Not used Table 7-6 gives the Correlation of PLC registers to the remote 3x register after the read is completed. CNOE-311 Application Manual 7 MSTR Operation 33

34 Table 7-6 Register Correlation PLC Register Remote Register Opcode 101 (Write Multiple 0x Coils) MSTR Opcode 101 generates a Modbus opcode 15 multiple coil write to the target 0x coils. The data will come from the PLC 4x registers designated by the middle node of the MSTR. The Most Significant Bit of the middle node register is the starting coil for the write data. The target 0x coils are determined by the third implied register in the control block. The second implied register gives the number of coils transferred by the write. Table 7-3 shows the Control Block Registers for a CNOE-800 in PLC Slot 3 writing the 18 bit values from PLC registers and to a Modbus/TCP device at IP Address , Modbus/TCP Index 10, and remote coils through Table 7-7 PLC Control Block Register Opcode 101 to Modbus/TCP Target Value (Decimal) Value (Hex) Description MSTR Opcode 101, 0x Write N/A N/A Error Status Number of coils written Remote 0x starting coil A High byte = Slot 3, Low byte = Target Index = C0 Target IP Address A8 Target IP Address Target IP Address C Target IP Address 34 7 MSTR Operation CNOE-311 Application Manual

35 If PLC register = A164 (hex) = (binary) and register = 8000 (hex) = (binary) then Table 7-8 will show the correlation between the PLC bits and the remote coils. Table 7-8 Bit Correlation between PLC and Target PLC Bit Remote Coil Value Opcode 102 (Read 0x Coils) MSTR Opcode 102 generates a Modbus opcode 1 multiple coil read from the target 0x coils. The data will show up in the PLC 4x registers designated by the middle node of the MSTR. The target 0x coils are determined by the third implied register in the control block. The second implied register gives the number of coils transferred by the read. Table 7-9 shows the Control Block Registers for a CNOE-800 in PLC Slot 4 reading the values from a Modbus serial device on CNOE port 1 drop 2, Modbus target slave address 104, and remote coils through CNOE-311 Application Manual 7 MSTR Operation 35

36 Table 7-9 Opcode 102 Read from Modbus Serial Target on Port 1 PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 102, 0x Read N/A N/A Error Status Number of coils to read Remote 0x starting coil High byte = Slot 4, Low byte = not used High byte = Number of drops in route = 2, Low byte = First drop in route = High byte = Second drop in route = 104 Low byte = Third drop in route =Not used High byte = Fourth drop in route = Not Used Low byte = Fifth drop in route =Not used High byte = Sixth drop in route = Not Used Low byte = Seventh drop in route =Not used If the remote slave has coils 6, 7, and 9 ON but Coil 8 OFF then PLC Register = D000 (hex) = (binary) and Table 7-10 will show the correlation between the PLC bits and the remote coils. Table 7-10 Bit Correlation between PLC and Target PLC Bit Remote Coil Value N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A 0 Opcode 103 (Read 1x Coils) MSTR Opcode 103 generates a Modbus opcode 2 multiple input bit read from the target 1x bits. The data will show up in the PLC 4x registers designated by the middle node of the MSTR. The target 0x coils are determined by the third implied register in the control block. The second implied register gives the number of coils transferred by the read MSTR Operation CNOE-311 Application Manual

37 Table 7-11 shows the Control Block Registers for a CNOE-311 in PLC Slot 3 reading the values from a Modbus/TCP device on a Modbus/TCP <> Modbus Serial Bridge at IP Address of , Modbus target slave address 12, and remote input bits through Table 7-11 Opcode 103 Read from Modbus/TCP Target PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 103, 1x Read N/A N/A Error Status Number of input bits to read DF Remote 1x starting bit C High byte = Slot 3, Low byte = Target Index = A Target IP Address Target IP Address Target IP Address B Target IP Address If the remote slave has bits 10126, 10129, 10133, 10134, 10236, 10240, 10242, 10244, 10245, and ON and the rest OFF then PLC registers Register = 1234 (hex) = (binary) Register = 5640 (hex) = (binary) and Table 7-12 will show the correlation between the PLC bits and the remote inputs. CNOE-311 Application Manual 7 MSTR Operation 37

38 Table 7-12 Bit Correlation between PLC and Target PLC Bit Remote Coil Value N/A N/A N/A N/A N/A N/A 0 Opcode 106 (Read 3x Registers) MSTR Opcode 106 generates a Modbus opcode 4 multiple input register read from the target 3x registers. The data will show up in the PLC 4x registers designated by the middle node of the MSTR. The target 3x registers are determined by the third implied register in the control block. The second implied register gives the number of registers transferred by the read. Table 7-13 shows the Control Block Registers for a CNOE-311 in PLC Slot 4 reading the values from a Modbus/TCP Ethernet device at IP Address , Modbus target slave address 1, and remote registers through MSTR Operation CNOE-311 Application Manual

39 Table 7-13 Opcode 106 Read from Modbus/TCP Target PLC Control Block Register Value (Decimal) Value (Hex) Description A MSTR Opcode 106, 3x Read N/A N/A Error Status Number of registers read Remote starting 3x register High byte = Slot 4, Low byte = Target Index = CE Target IP Address DF Target IP Address Target IP Address A9 Target IP Address Table 7-14 gives the correlation of PLC registers to the remote 3x register after the read is completed. Table 7-14 Register Correlation PLC Register Remote Register Opcode 108 (Write 4x Single Register) MSTR Opcode 108 generates a Modbus opcode 6 single register write to the target 4x register. The data will come from the PLC 4x register designated by the middle node of the MSTR. The target 4x register is determined by the third implied register in the control block. The second implied register will not be used, as this is always a single register write. Table 7-3 shows the Control Block Registers for a CNOE-800 in PLC Slot 3 writing the value from PLC register to a Modbus serial device on CNOE port 2 drop 14, Modbus target slave address 23, and remote register Table 7-15 Opcode 108 Write to Modbus Serial Target on Port 2 w CNOE-311 Application Manual 7 MSTR Operation 39

40 PLC Control Block Register Value (Decimal) Value (Hex) Description C MSTR Opcode 102, 0x Read N/A N/A Error Status N/A N/A Number of Registers to Write (Always 1) Remote 4x Register to Write High byte = Slot 3, Low byte = not used E High byte = Number of drops in route = 2, Low byte = First drop in route = High byte = Second drop in route = 104 Low byte = Third drop in route =Not used High byte = Fourth drop in route = Not Used Low byte = Fifth drop in route =Not used High byte = Sixth drop in route = Not Used Low byte = Seventh drop in route =Not used Table 7-16 Register Correlation PLC Register Remote Register Opcode 109 (Write 0x Single Coil) MSTR Opcode 109 generates a Modbus opcode 5 single coil write to the target 0x coil. The data will come from the PLC 4x register designated by the middle node of the MSTR. The Most Significant Bit of the middle node register is bit number one for the write data. The second implied register in the control block gives the bit number to be transferred by the write. The target 0x coil is determined by the third implied register in the control block. Table 7-17 shows the Control Block Registers for a CNOE-800 in PLC Slot 3 writing the bit value from PLC register bit 3 to a Modbus/TCP device at IP Address , Modbus/TCP Index 10, and remote coil Table 7-17 Opcode 109 to Modbus/TCP Target PLC Control Block Register Value (Decimal) Value (Hex) Description D MSTR Opcode 109, Single 0x Write N/A N/A Error Status Number of bit in to be used Remote 0x coil A High byte = Slot 3, Low byte = Target Index = C0 Target IP Address A8 Target IP Address Target IP Address C Target IP Address 40 7 MSTR Operation CNOE-311 Application Manual

41 If PLC register = A164 (hex) = (binary) then Table 7-18 will show the correlation between the PLC bit and the remote coil. Table 7-18 Bit Correlation between PLC and Target PLC Bit Remote Coil Value Opcodes 111 & 112 (Read/Write Option Module Port Configuration) MSTR Opcode 111 generates a backplane register read from the target option module. The data will show up in the PLC 4x registers designated by the middle node of the MSTR. MSTR Opcode 112 generates a backplane register write to the target option module. The data will come from the PLC 4x registers designated by the middle node of the MSTR. The target option module registers are determined by the fifth implied register in the control block. To avoid writing unwanted data to a port, the user should always perform a read of the desired port, change only the relevant registers, then write the data back to the module. Table 7-19 shows the Control Block Registers for reading or writing the settings for a port in a CNOE- 800 in PLC Slot 4. Table 7-19 Opcodes 111 & 112 Read/Write Option Module Port Configuration PLC Control Block Register Value (Decimal) Value (Hex) 006F N/A N/A Error Status N/A N/A Not Used N/A N/A Not Used High byte = Slot 4, Low byte = Not Used Read Serial Port N/A N/A Not Used N/A N/A Not Used N/A N/A Not Used Description MSTR Opcode 111, Option Module Port Configuration Read MSTR Opcode 112, Option Module Port Configuration Write Table 7-20 is a list of the 32 registers that control the operation of the Ethernet port. CNOE-311 Application Manual 7 MSTR Operation 41

42 Table 7-20 Ethernet Port Control Registers Port 0 Legal Values Function Ethernet SY/MAX drop number Reserved for future use. Do not modify , 260, 272 Protocol Mode 2 = SY/MAX 802.3, 260 = Modbus/TCP, 272 = MBTCP+SY/MAX Reserved. Do not modify Buffer Limit Reserved. Do not modify Options (See Table on Page 87) Reserved for future use, do not modify Table 7-21 is a list of the 32 registers that control the operation of the serial ports MSTR Operation CNOE-311 Application Manual

43 Table 7-21 Ports 1 and 2 Configuration Registers Port 1 Port 2 Legal Values Function Drop Number Baud Rate (See Table <Baud Rate Values Table> on Page ,1 Data Bits (See Table <Data Bits Values Table> on Page < ,1,2 Parity Bits (See Table <Parity Bits Values Table> on Page ,1 Stop Bits (See Table <Stop Bits Values Table> on Page < Protocol Mode (See Table <Port Mode Values Table> on Page Packet size limit (Modes 4, 5, and 8) Auto-transfer Read Source Register (Peripheral) RNIM Identification Number Time limit (Modes 4, 5, and 8) MODBUS Host mode retry timeout RNIM CTS Delay Multidrop window interval Auto-transfer Interval RNIM Message Response Timeout Priority in Multidrop mode Auto-transfer Read Destination Register (Mailbox) RNIM BID Address Number of nodes in Multidrop mode Auto-transfer Write Source Register (Mailbox) RNIM Number of Retries Number of drops in target route (Modes 4,5,8 and Auto-transfer) Target Route Drop 1 (Modes 4,5,8 and Auto-transfer) Target Route Drop 2 (Modes 4,5,8, and Auto-transfer) Target Route Drop 3 (Modes 4,5,8, and Auto-transfer) Target Route Drop 4 (Modes 4,5,8, and Auto-transfer) Target Route Drop 5 (Modes 4,5,8, and Auto-transfer) Target Route Drop 6 (Modes 4,5,8, and Auto-transfer) Target Route Drop 7 (Modes 4,5,8, and Auto-transfer) Target Route Drop 8 (Modes 4,5,8, and Auto-transfer) ,2,3,4 MODBUS Host equivalent READ command ,6,15,16 MODBUS Host equivalent WRITE command Buffer Limit CNOE-311 Application Manual 7 MSTR Operation 43

44 Table 7-22 Ports 1 and 2 Configuration Registers (Continued) Port 1 Port 2 Legal Values Function Auto-transfer Read Count RNIM Pause Time Auto-transfer Write Count RNIM Message Count Auto-transfer Write Destination register (Peripheral) RNIM BID Reply Interval MODBUS Host Offset (Register Bias) Options (See Table on Page 87) Modbus Slave Starting Address PAD Count in SY/MAX, N-T-N or CTS Delay in 10mS units for Modbus Modbus RTU inter-character timing in ms. (default is 4 characters) Reserved for future use, do not modify Table 7-23 is a list of the 32 registers that control the operation of the backplane port. Table 7-23 Backplane Port Configuration Registers Register Legal Values Function Drop Number Reserved for future use. Do not modify Span of I/O scan entries per socket MSTR reply timeout in 1/100ths of a second Reserved for future use. Do not modify Programming channel idle timeout in minutes Reserved for future use. Do not modify Options (See Table on Page 87) Reserved for future use. Do not modify. Opcode 512 (Reset Option Module to Factory Defaults) MSTR Opcode 512 generates a backplane register write to the target option module s command register. The target option module will reset all settings to factory default. Table 7-24 shows the Control Block Registers for resetting a CNOE-800 in PLC Slot MSTR Operation CNOE-311 Application Manual

45 Table 7-24 Opcode 512 Reset Option Module to Factory Defaults PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 512, Reset Option Module to Factory Defaults N/A N/A Error Status N/A N/A Not Used N/A N/A Not Used High byte = Slot 4, Low byte = Not Used N/A N/A Not Used N/A N/A Not Used N/A N/A Not Used N/A N/A Not Used Opcode 513 (Set Option Module IP Address) MSTR Opcode 513 generates a backplane register write to the target option module to set its IP address. The data will be entered directly into the MSTR control block. Table 7-25 shows the Control Block Registers for setting a CNOE-311 in PLC Slot 5 with an IP address of Table 7-25 Opcode 513 Set Option Module IP Address PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 513, Set Option Module IP Address N/A N/A Error Status N/A N/A Not Used N/A N/A Not Used High byte = Slot 5, Low byte = Not Used C0 IP Address Byte A8 IP Address Byte IP Address Byte A IP Address Byte 4 Opcode 516 (Set Option Module Subnet Mask) MSTR Opcode 516 generates a backplane register write to the target option module to set its subnet mask. The data will be entered directly into the MSTR control block. Table 7-26 shows the Control Block Registers for setting a CNOE-311 in PLC Slot 5 with a subnet mask of CNOE-311 Application Manual 7 MSTR Operation 45

46 Table 7-26 Opcode 516 Set Option Module Subnet Mask PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 516, Set Option Module Subnet Mask N/A N/A Error Status N/A N/A Not Used N/A N/A Not Used High byte = Slot 5, Low byte = Not Used FF Subnet Mask Byte FF Subnet Mask Byte Subnet Mask Byte Subnet Mask Byte 4 Opcode 517 (Set Option Module Default Gate) MSTR Opcode 517 generates a backplane register write to the target option module to set its default gate. The data will be entered directly into the MSTR control block. Table 7-27 shows the Control Block Registers for setting a CNOE-311 in PLC Slot 5 with a default gate of Table 7-27 Opcode 517 Set Option Module Default Gate PLC Control Block Register Value (Decimal) Value (Hex) Description MSTR Opcode 516, Set Option Module Subnet Mask N/A N/A Error Status N/A N/A Not Used N/A N/A Not Used High byte = Slot 5, Low byte = Not Used C0 Default Gate Byte A8 Default Gate Byte Default Gate Byte Default Gate Byte 4 MSTR Error Codes Below is a list of error codes returned by the MSTR block. This will appear in the first implied register in the MSTR block. NOTE: These error codes are only the error codes returned by the CNOE. The PLC itself may also return MSTR error codes. For a list of these, refer to the PLC programming software help section, or to the Modicon Ladder Logic Block Library User Guide (840 USE ) MSTR Operation CNOE-311 Application Manual

47 Table 7-28 MSTR Error Codes Hex Code Description 1001 Operation Aborted 2001 Unsupported Opcode 2002 Control Block changed during operation 2004 Invalid port number used with opcode 111, Data Block out of PLC memory range 300n Received Modbus Exception response n 6n40 Bad format in control block, word n 7001 No reply received within reply timeout 7002 Contact Tech. Support E001 Contact Tech. Support CNOE-311 Application Manual 7 MSTR Operation 47

48

49 8 Ethernet I/O Scanner Introduction The CNOE-311 s Ethernet I/O scanner allows continual reading and /or writing of data from specified Modbus/TCP slaves without using MSTR resources to do so. The user configures an I/O scan table using RPCSW32. This table specifies information such as the IP address and register address of the data to be accessed. It also specifies the register address of the PLC or the CNOE-311 where the data will be stored. Configuring the Ethernet I/O Scanner Using RPCSW32 The offline menu of RPCSW32 contains a choice called "edit ethernet I/O scan table." Once selected, the editing screen for the Ethernet I/O Scanner is available. In this table is a list of 128 possible entries that the CNOE-311 can use to access data on the Ethernet. Each entry consists of an IP address, an ID, a timeout, a scan rate, the addresses of the data to be manipulated, the number of registers to be manipulated, and a selection of what to do with the current data on comms failure. Also within the setup page is the information to configure how the PLC interacts with the Ethernet I/O Scanner. It would be undesirable to edit an I/O scan entry while the scan was active. Consequently, the I/O Scanner table cannot be edited online. To edit the table, start with an offline Fetch memory from module. This copies the current memory of the module into the memory of the software. Then do an offline edit ethernet I/O scan table. Make all the desired changes, then do an offline Send memory to module. NOTE: If the CNOE-311 is configured to be an I/O module, all following discussion of register spaces becomes invalid. When configured as an I/O module, there is only one register space. The first 2048 mailbox registers are used in this situation. IP Address This is the IP address of the device or bridge to be polled. ID This is the device address or bridge index of the device to be polled. This may also be known as Slave ID or destination index. Timeout This value determines the timeout, in milliseconds, before the CNOE-311 expires the operation. Scan Rate This value determines how often, in milliseconds, the CNOE-311 will poll the device. If set to zero, the CNOE-311 will poll the device as fast as possible. CNOE-311 Application Manual 8 Ethernet I/O Scanner 49

50 Register Space This column precedes the Master and Slave columns for both Read and Write. Although this column has no heading, it allows the user to choose the register space in the device to be polled. Valid choices are 0x, 1, 3x, and 4x. Default is 4x. Press the space bar to toggle, or press 0, 1, 3, or 4 to select. Master (Under Read or Write) This value determines the mailbox register in the CNOE-311 that is the starting register for the operation. The valid range is 1 through A value of 0 disables the I/O scan entry. Slave (Under Read or Write) This value determines the register in the Peripheral device that is the starting register for the operation. The valid range is 1 through A value of 0 disables the I/O scan entry. Cnt (Under Read or Write) The Count field determines the number of consecutive registers (or words if discretes are used) moved in the operation. The valid range is 0 through 120. A value of 0 disables the Auto-Scan entry. H/0 This setting is set to HLD or 0, depending on the desired function. If set to HLD, the CNOE-311 will hold the value of the last read when the next read times out. If set to 0, the CNOE-311 will reset the registers to 0 if a timeout occurs. NOTE: If a read and a write are configured in the same I/O scan entry, the CNOE-311 will use Modbus opcode 23, or x17, to issue a read/write in the same message. If the downstream device does not support this opcode, the the user must configure the reads and writes in separate entries. Copying, Pasting, and Automatically Incrementing Pressing the F6 key will copy the entire entry for which there is a highlighted cell. Pressing the F7 key will paste the copied data to the entire highlighted entry. Pressing the F8 key will automatically increment the highlighted cell by an appropriate number based on the data in the previous record. Editing Global I/O Scanner Configuration Pressing the F4 key will activate the Ethernet I/O Scanner global configuration screen. In this screen the user can select the Health Block start address, the Health Block s register space, and the functioning of the Diagnostic Block and the I/O Disable Block. The Health Block is a group of eight 3x registers, each containing 16 bits, or 128 1x registers that report the health of the I/O scanner entries. The user can select the starting register address and the register space for the Health Block. The bits read from left to right, so I/O scan entry 1 is the most significant bit of the first 3x register, or the first 1x register. These registers will only be updated when one of the bits in the block changes state. The Diagnostic Block is a group of 128 registers -- one per I/O scan entry -- that contains diagnostic data related to that entry. The user can configure whether the Diagnostic Block is enabled, the starting register address, and the register space (3x or 4x). The values in these registers are updated once per second. Figure 8-1 gives a list of the error codes associated with a given I/O scan entry. The high byte of each possible error contains the error code, and the xx is a counter that represents each time the I/O scan entry goes from normal operation to an error state. The counter rolls over from xff to x80, so any number greater than x79 may not be accurate, but certainly means there have been a large number of errors Ethernet I/O Scanner CNOE-311 Application Manual

51 Table 8-1 Error 0x23xx 0x3Nxx 0x73xx 0x74xx 0x75xx 0x76xx 0x77xx 0xF1xx 0xFFxx Diagnostic Block Error Codes Description Invalid local register address specified Received Modbus exception response N Waiting for shared socket to connect Connection actively refused by target (received a Reset) Message timeout No response to connect request Message lost due to insufficient backplane buffers Initialization (powering up) state I/O Scanner disabled The I/O Disable Block is a group of eight 4x registers, or 128 0x registers, laid out like the Health Block that creates an ON/OFF bit for each I/O Scanner entry. The user can configure whether the I/O Disable Block is enabled, the starting register address of the block, and the register space (0x or 4x). When the block is enabled, the user can disable a single entry by setting its associated bit to 1, rather than having to erase the entry from the table. Ethernet I/O entries per socket In the online Edit port parameters screen, the settings for the back plane port include a setting of ethernet I/O entries per socket. This setting specifies the span of entries that the CNOE-311 will compare for a common IP address. All entries within that span will be single-threaded on a single socket to the specified IP address. When polling devices such as Niobrara s products that have limited numbers of available sockets, this number should be set to something large enough to accommodate that limit. However, for devices that can handle unlimited connections, the user may experiment with this number to achieve maximum throughput of data. CNOE-311 Application Manual 8 Ethernet I/O Scanner 51

52

53 Configuration Software RPCSW32 9 RPCSW32 The RPCSW32 software program is provided free of charge to CNOE-311 users. RPCSW32 is a Windows 32-bit console application and may be run under WIN95/98/NT/2000/ME/XP only. This software is used to configure the operational parameters of the CNOE-311. It may be operated in either online or offline modes. RPCSW32 will use the TCP/IP stack native to WIN95/98/NT/2000/ME/XP for direct MODBUS/TCP connection to the CNOE-311. In online mode, RPCSW32 presents the user with a screen of data describing the operation of all of the module s ports. The arrow keys are used select the port parameters to be modified and the space bar and + and - keys are used to change the parameters of that port. Changes made in the online mode are transferred to a connected CNOE-311 module and are effective immediately. In offline mode, RPCSW32 allows a copy of the configuration to be uploaded from the CNOE-311 to an image in offline memory. The offline copy can be edited without affecting the CNOE-311 in real time. The offline copy can be saved to a named disk file for later retrieval, or listed on a hard copy printer. A CNOE-311 need not be connected to perform most offline operations. The offline copy of the configuration parameters may be downloaded to a CNOE-311 module at any time. Because the CNOE-311 has an internal nonvolatile parameter memory, the configuration parameters normally will not need to be reloaded unless a change has been made. The startup screen of RPCSW32 is shown in Figure 9-1 on page 54. The operational modes are selected by the highlighted menu bar on the fourth line. Selection can be made by moving the cursor to the desired option using the arrow keys and pressing ENTER. A short cut is provided, simply type "N" for online, "F" for offline, "U" for Utility, "S" for setup or "Q" to quit. CNOE-311 Application Manual 9 Configuration Software RPCSW32 53

54 Figure 9-1 RPCSW32 Startup Screen If offline mode is selected, a second menu appears as shown in Figure 9-2. This menu presents the available functions for manipulating the offline image of the configuration parameters and for transfer of configuration data to and from the CNOE-311 module. Use the up and down arrows to move the highlight, ENTER to select the highlighted choice, or the initial capital letter to quickly select an option. The online and offline parameter editing screens are nearly identical. The difference is in operation. Every time a change is made in the online mode, the modified parameter is transmitted to the CNOE In offline mode, changes are made to the parameter image in offline memory. Changes made in the online screen affect only the configuration stored in the attached CNOE-311, not the offline copy. Likewise, changes made in offline mode have no effect on a connected CNOE-311 until they are explicitly sent to it using the "Send memory to module" function. RPCSW32 also contains several convenient utilities for general use: a SY/MAX Register Viewer, and a Statistics Viewer. These features use the same setup as the online and offline functions. Figure 9-2 RPCSW32 offline Menu Data Entry Keys Whenever data entry is allowed by the program, certain keys can be used to facilitate data entry. They are: BACKSPACE Move cursor left and remove character there LEFT ARROW Move cursor to the left one character RIGHT ARROW Move cursor to the right one character DEL Remove the character under the cursor INS Change between insert and overstrike modes of entry HOME Move cursor to the left edge of the field END Move cursor to the end of the data Control-F Move cursor right (Forward) one word Control-R Move cursor left (Reverse) one word Control-D Delete from the cursor to the end of the field 54 9 Configuration Software RPCSW32 CNOE-311 Application Manual

55 Control-U Delete from cursor to the beginning of the field Control-Y Delete all characters in the field ESC Exit the field without modifying it ENTER Accept the contents of the field When a field is opened for input, the cursor is positioned at the left side of the field. If data is already present in the field, typing any character other than those listed above will cause the field to be blanked allowing entry of new data without first deleting the old. If it is desired to retain the previous data for editing, make sure the first key you type is an editing key such as a left or right arrow. Most data fields in RPCSW32 do not allow direct entry of the parameter, instead a series of choices is presented. The following keys are used: GRAY + Increments options to the next available choice GRAY - Decrements options to the previous choice SPACE BAR Increments options and rolls back to first option after last The arrow keys are used to maneuver between fields. Online and Offline Editing Screen In either the online or offline mode, parameters are changed by moving the highlighted cursor to the desired field using the arrow keys and by pressing the +, -, or space bar to toggle through available parameters. Figure 9-3 RPCSW32 online Edit Screen The online Edit (and offline Edit) screen is presented as a matrix of parameters, see Figure 9-3. Each column represents one of the ports of the CNOE-311. The lower half of the screen will change to present the available parameters for each protocol mode. The parameters are described below. Drop Number (Ethernet and Backplane). This value determines the drop number of the port. All ports must have unique drop numbers within the module. The drop number of the Ethernet port must be unique for the entire Ethernet network. The Ethernet drop number must fall within the range of 00 through 99. The drop number for the backplane port must fall within the range 000 through 199. The default drop number for the Ethernet port is 0, and backplane is port is 1. CNOE-311 Application Manual 9 Configuration Software RPCSW32 55

56 Protocol (E-net). The CNOE-311 modules support SY/MAX 802.3, Modbus/TCP, and MBTCP+SY/MAX. The default is Modbus/TCP. Buffer Limit Mode Specific Sub-menus (E-net). The buffer limit sets the maximum amount of available buffers for each port. The default value is 32 with a minimum value of 2 and a maximum value of 64. It is not recommended to alter the number of buffers available unless the equipment requires a small number of buffers. Certain mode values require additional parameters and other fields will appear in the middle area of the screen. Only the parameters listed in this manual are used by the CNOE-311. These parameters are explained as follows: IP Address (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The IP Address is entered in dotted-decimal notation. This address should be provided by the Network Administrator of your corporate Ethernet. Each IP device on the network must have a unique IP Address. The default IP Address for the RPC will be Subnet Mask (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The Subnet Mask is entered in dotted-decimal notation. This address should be provided by the Network Administrator of your corporate Ethernet. The default mask is Default Gate (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The Default Gate is the IP address of the default gateway for the subnet that the CNOE-311 is located on. The Default Gate is entered in dotted-decimal notation with the factory default as MBAP TCP Port (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The TCP Port number for Modbus TCP/IP is fixed at 502. This is the TCP Port number that the RPC-TCP Server listens on for accepting new connections. TCP Backoff (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The TCP Backoff is the amount of time that TCP will wait for an acknowledgment of a transmitted message. When this amount of time has passed after transmitting a message, TCP will retry the message and reset its timeout timer to twice this value. After this timer expires without an acknowledgment, the value is quadrupled, etc., until the Downstream timeout expires. This value is expressed in units of 1/100th of a second. The default value is 100 (1 sec.). Downstream Timeout (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The Downstream Timeout determines the amount of time that the CNOE-311 will wait for a reply from the remote device. Upon the expiration of this timer, a timeout error reply is generated to the source of the message and the TCP layer is instructed to give up on the message. This value is expressed in units of 1/100th of a second and the default value is 500 (5 sec.). Quiet Timeout (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The Quiet Timeout determines the amount of time that the CNOE-311 will keep a TCP connection open without receiving or transmit Configuration Software RPCSW32 CNOE-311 Application Manual

57 ting a new message on the connection. This value is expressed in units of 1 second and the default value is 600 (10 minutes). Server Operation: The CNOE-311 will send a keep-alive TCP message to the client after the Quiet Timeout expires. If the Client responds, then the connection is left open. If the Client doesn t respond, the CNOE-311 will retry once a second for 10 seconds and then close the connection. Client Operation: If the timeout expires on a connection that the CNOE-311 originated, the CNOE- 311 will send a FIN on that connection to close it down. NOTE: The "keep alive" message sent by another Niobrara server will be recognized by the CNOE- 311 client and the CNOE-311 will shut down the connection. So if the client and server have different timeout values, the shortest of the two will cause the connection to close. IP Framing (E-net Port only, Modbus/TCP and MBTCP+SY/MAX protocol only). The CNOE-311 may use Ethernet II (DIX) or (SNAP) framing. The most common network IP setting is Ethernet II. MAC Address (E-net Port only).the "Online, Edit port parameters" screen will display the MAC Address for the module in hexadecimal notation. E-Peer (E-Net Port only, SY/MAX only). The E-Peer item allows the enabling of the CNOE-311 s Peerto-Peer mode. If set to OFF the E-Peer is disabled on this CNOE-311 and the Auto-Transfer settings for the E-Net port are displayed. If set to ENABLE, the Auto-Transfer settings for the E-Net port change to show the settings for the E-Peer. Transfer Interval (Auto-transfer). This value determines the periodic interval between Auto-transfer READS/WRITES. The value is expressed in units of n/100 seconds (i.e. 100 = 1 sec). Some consideration must be taken in selecting the interval. Too small of a value will result in the filling of the buffers and possible rejection of reads/writes. If the application is time critical, this value should be set to a value slightly longer than the transmission + reception time of the largest expected packets. If both read and write are selected, the transmission time must be calculated for each worst case and added together for the final interval. Transfer Route (Auto-transfer). The route describes the path that any Auto-transfer reads and/or writes will require to reach the desired peripheral device. Two drops are required. The first must be the drop number of the CNOE-311 port, the second must be the unit number of the attached device. READ Count (Auto-transfer). This value determines whether the Auto-transfer read will operate. A value of zero will disable the Auto-transfer read. A value of one will cause a read to occur at the time interval. A value greater than one will cause a multiple register read to occur starting at the READ From register. READ From (Auto-transfer). This is the register number located within the peripheral device that is of interest. On multiple register reads, READ Count > 1, this is the starting register of the multiple register read. READ To (Auto-transfer). This is the register number in the mailbox where the data from the peripheral device will be stored. On multiple register reads, this is the first register of the multiple registers. CNOE-311 Application Manual 9 Configuration Software RPCSW32 57

58 WRITE Count (Auto-transfer). This value determines whether the Auto-transfer WRITE will operate. A value of zero will disable the Auto-transfer write. A value of one will cause a write to occur at the time interval. A value greater than one will cause a multiple register write to occur starting at the WRITE From register. WRITE To (Auto-transfer). This is the register number located within the peripheral device that is of interest. On multiple register writes, this is the starting register of the multiple register write. WRITE From (Auto-transfer). This is the register number in the mailbox where the data for the peripheral device is stored. On multiple register writes, this is the first register of the multiple registers. Total E-Peer Nodes (E-Peer). This value determines the total number of CNOE-311/EPE5/MEB/QUCM modules on the E-Peer. This value must be in the range of and must be the same for all CNOE- 311/EPE5/MEB/QUCM modules using the E-Peer. E-PEER devices with This Node s Number set to zero are not included in the total E-PEER nodes count. This Node s Number (E-Peer). This value sets this CNOE-311 s E-Peer number. This number must be unique among the E-Peer members and must also fall within the range of the Total E-Peer Nodes. NOTE: This value has no relationship to the SY/NET drop number of the E-Net Port. A special case of This Node s Number is when it is set for zero. When This Node s Number is set to zero and the E-PEER is enabled, this CNOE-311 will accept E-PEER messages, but will not transmit any data. This allows E-Peer devices to listen to all of the data on the network but not consume any of the available bandwidth because they have nothing to transmit. E-PEER devices with This Node s Number set to zero are not included in the total E-PEER nodes count. Start Register (E-Peer). This is the register number in the mailbox where the data for the other E-Peer members is stored. On multiple register writes, this is the first register of the multiple registers. Register Count (E-Peer). This value determines the number of registers broadcasted from this CNOE-311 to the other members of the peer. The register count is not required to be the same among the members of the peer. Destination Reg (E-Peer). This is the register number in the other members of the peer where the data from this CNOE- 311 will be transferred. This value is commonly the same as the Start Register. Update Interval (E-Peer). The amount of time in milliseconds allotted for a complete cycle of the peer. It is recommended that the Update Interval be an integer multiple of the total number of units where the multiple has a minimum value of 2. For example, if there are 8 nodes in the peer and 3mS is allowed for each node, set the Update Interval to 24. Backplane Port Mode (Backplane Port). Selects whether the CNOE-311 will be seen by the PLC as an option module or an I/O module. As an option module, the user has full control to the PLC. As I/O only, the CNOE-311 can only manipulate the registers assigned to it by the PLC Configuration Software RPCSW32 CNOE-311 Application Manual

59 Note: This feature is only read by the PLC at power up. If it is changed, the rack s power must be cycled for the change to take effect. HOTKEYS MSTR Message Reply Timeout (Backplane Port). Specifies the amount of time the CNOE will wait before sending back an error to the PLC that the downstream device did not respond. This value is set in increments of 1/100th of a second. The default is 1000 (10 seconds). Programming Channel idle timeout (Backplane Port). Specifies the amount of time the CNOE will keep a programming connection open without a message being sent or received. The value is set in increments of 1 minute. The default is 16 minutes. Ethernet I/O Scanner (Backplane Port). Determines whether the Ethernet I/O Scanner is enabled. If enabled, the CNOE-311 will read its I/O scan table, and begin issuing messages from the Ethernet port. More details will follow. Default is disabled. Ethernet I/O Entries Per Socket (Backplane Port). Specifies the span of entries in the I/O scanning table the CNOE-311 will compare for a common IP address. All entries in that span to a single IP address will be sent in a single socket before opening another socket to that device. Valid entries are The current default is 4. F1 Print Screen hotkey Pressing the F1 key at any time will allow for printing of the screen to a printer or text file. Pressing the F1 key will produce a window similar to Figure 9-4. Figure 9-4 F1 Print Screen The new window prompts for an output filename. The default is PRN which prints to the DOS default printer. If a valid DOS filename is typed into the field, RPCSW32 will print the information to that filename as an ASCII text file. F2 Help Window Pressing the F2 key will present the help window shown in Figure 9-5. Pressing any key will return to the previous location. CNOE-311 Application Manual 9 Configuration Software RPCSW32 59

60 Figure 9-5 F2 Help Window F3 Statistics Viewer Pressing the F3 key while on a port will invoke the statistics register viewer. This window will display the statistical registers for a specific port. The port selection may be changed by pressing the space bar or the + or - keys. Pressing the 0 (zero) or the z key will result in the clearing of all of the statistical parameters for the selected port. Press the ESC key to exit back to the main screen. The Ethernet port has its own set of statistics as shown in Figures 9-6, 9-7, and 9-8. Pressing the Page Down key will advance the statistic viewer to a new page of statistics. Pressing the Page Up key will return to the first page. Pressing the left arrow key, right arrow key, - key, + key, or space bar will change the port displayed. Pressing the F9 key will provide a shortcut to the SY/MAX setup window for changing the route, etc. Figure 9-6 Ethernet Port Statistical Screen (Page 1) 60 9 Configuration Software RPCSW32 CNOE-311 Application Manual

61 Figure 9-7 Ethernet Port Statistical Screen (Page 2) Figure 9-8 Ethernet Port Statistical Screen (Page 3) Below is a list of the currently active registers for the Ethernet Port and the conditions which cause them to be incremented. For a complete table of these registers see page 77. When one of the error registers is incremented, the RED and GREEN FAULT lights on the module will be lit for one second. Packets generated internally. This register is incremented when the port generates a message to be transmitted from the port to the attached device. This will occur when the CNOE-311 sends a message out the Ethernet port. Internal generations failed (No buffer). Check the Auto-transfer interval and slow it down. (increase the value) Received ACK of sent segment. A valid transmission has occurred to the attached Ethernet device. Connection aborted, too many retries. When the downstream timeout expires, the CNOE-311 will close the connection. Segments retransmitted. Incremented when a negative acknowledgment or the failure of a positive acknowledgment has occurred after a transmission. CNOE-311 Application Manual 9 Configuration Software RPCSW32 61

62 Packets lost because unrouteable. Check the route of the sending devices routed to the port. Use the Last route received statistics to determine the route incoming on the port. Illegal queries. Check the command being sent to the port. Local reads. Incremented when a read request has been received on the port from an external device. This means that the read was routed to the module and operated on the setup register, mailbox register, or statistics registers. Local writes. Incremented when a write request has been received on the port from an external device. This means that the write was routed to the module and operated on the setup register, mailbox register, or statistics registers. Open connections. Displays the number of Ethernet devices currently connected to the CNOE Client connection. Number of open connections for which the CNOE-311 is a client. Unknown ethernet frame type received. Incremented when packets that are not Modbus/TCP or SY/MAX are transmitted to the CNOE-311. Ethernet frames transmitted. Incremented when a command, reply, ACK, NAK, or BUSY frame has been transmitted to the Ethernet. Ethernet frames received. Incremented when a command, reply, ACK, NAK, or BUSY frame has been received from the Ethernet. Last route received. These eight fields display the route of the last incoming message received by the port. If fewer than eight drop numbers are included in the route, --- will be displayed for each location after the last drop. If messages are received with no route --- will be displayed in all eight locations. If a port has not received any messages, all locations may display 0. When several messages arrive with different routes, this display may jump back and forth between the routes. It should be noted that since the CNOE-311 is a multitasking system, it may be possible for it to be updating the Last route received while the personal computer is reading those values. The result may be that a route is displayed that is a combination of two or more routes and is therefore not valid. The Last route received is intended for troubleshooting systems where it is unsure what the route is from a particular device. Ethernet collisions. Incremented when the CNOE-311 has detected a collision between a packet it is sending and other traffic on the network. Buffers in internal cue. Displays the number of messages waiting in the cue to be processed. Packets lost because excess collisions. When the collision limit of 16 collisions on a single packet has been exceeded the CNOE-311 will report an error and stop sending the packet. Receive packets lost for CRC error. Incremented when a receive packet has an error in the checksum. Receive packets lost for framing error. Incremented when a packet received from the Ethernet has an error in the framing. Sequence error, NAK TRANS. The CNOE-311 keeps a table of the SY/NET Ethernet Sequence numbers from every active SY/NET Ethernet unit on the network. If the CNOE-311 port receives a packet with an incorrect Sequence number from another device this register is incremented and a NAK TRANS is sent to the offending device. Buffers currently in use. This number displays the number of buffers that this port is currently using. This number should remain low (0-3). If the Buffers currently in use climbs to near the Buffer limit, the system should be inspected because there is a bottle neck somewhere. Connected IP addresses. Pages 3 and 4 of the Ethernet statistics show the socket number and IP address of each Ethernet device connected to the CNOE-311. The backplane port has different types of statistics which are shown in Figures 9-9, 9-10, and Configuration Software RPCSW32 CNOE-311 Application Manual

63 Figure 9-9 Backplane Port Statistical Screen (Page 1) Figure 9-10 Backplane Port Statistical Screen (Page 2) CNOE-311 Application Manual 9 Configuration Software RPCSW32 63

64 Figure 9-11 Backplane Port Statistical Screen (Page 3) Below is a list of the currently active registers for the BackplanePort and the conditions which cause them to be incremented. For a complete table of these registers see page <Ports 1-4 Statistics Registers>. When one of the error registers is incremented, the RED and GREEN FAULT lights on the module will be lit for one second. Replies received from backplane. This register is incremented when a reply is received from the PLC on the backplane. Error Responses Generated. This increments each time an error is created by the CNOE-311 on the backplane. Replies to MSTR discarded. Increments when a message is out of context. The timeout may be too short. Messages generated by backplane. Increments each time the CNOE-311 generates a message on the backplane. Port unable to get buffer. This will happen if the CNOE-311 runs out of buffers on the backplane. This should never happen. If it does, please call Niobrara tech support. Memory access messages sent to PLC. This is incremented when there is a message sent to a queue to be serviced by the PLC. No context available for new MSTR. Incremented when a fifth MSTR has been activated by the ladder logic. The MSTR can t go active until another MSTR releases the resources. Count of active MSTR blocks. Running count of the number of currently active MSTR s. Message discarded. Increments if a message coming from the Ethernet device was untranslatable to the PLC. Bad message format. Any bad message (bad checksum, framing error, etc.) will increment this count. Backplane MB Channel message w/logon. When multiple masters are connected to the PLC, only one can be "logged on." This count increments when the logged on master sends a message. Backplane MB Channel message w/o logon. Increments when any master that is not logged on sends a message to the PLC. PLC memory access message serviced. Increments when a message in the queue gets serviced by the PLC Configuration Software RPCSW32 CNOE-311 Application Manual

65 MSTR operation initiated. Increments when the PLC issues an MSTR instruction. Port expired the programming connection. Increments when the programming channel idle timer expires. For more details, see page 59 Unsupported MSTR opcode. Increments when an MSTR is issued with an unsupported opcode. MSTR operation finished. Increments when an MSTR is completed. Backplane MB channel message serviced. Increments when a message is serviced by the PLC on the backplane Modbus channel. Error response generated-no rack comms. The CNOE-311 boots much faster than the PLC. This register will increment if a master tries to issue a message to the PLC before it has booted, and begun talking to the CNOE-311. This could also increment if the CNOE-311 is in a rack with no PLC, or a PLC with the wrong exec. Note: The error generated will be x0a, which is "Gateway Path Unavailable." Last route received. These eight fields display the route of the last incoming message received by the port. If fewer than eight drop numbers are included in the route, --- will be displayed for each location after the last drop. If messages are received with no route --- will be displayed in all eight locations. If a port has not received any messages, all locations may display 0. When several messages arrive with different routes, this display may jump back and forth between the routes. It should be noted that since the CNOE-311 is a multitasking system, it may be possible for it to be updating the Last route received while the personal computer is reading those values. The result may be that a route is displayed that is a combination of two or more routes and is therefore not valid. The Last route received is intended for troubleshooting systems where it is unsure what the route is from a particular device. End-of-scan hooks. Increments each time the PLC sends an end of scan hook. User Logic Hooks. Increments each time the PLC scans an MSTR that has the enable input energized. Exit Dim Hooks. Increments as the PLC is powering up. Programming logon claimed. Remains 0 if there is no master logged into the PLC. Buffers in internal queue. Displays the number of messages waiting in the queue to be processed. Buffers currently in use. This number displays the number of buffers that this port is currently using. This number should remain low (0-3). If the Buffers currently in use climbs to near the Buffer limit, the system should be inspected because there is a bottle neck or inefficient ladder code somewhere. PLC 0x Register count. The count of 0x registers configured in the PLC. PLC 1x Register count. The count of 1x registers configured in the PLC. PLC 3x Register count. The count of 3x registers configured in the PLC. PLC 4x Register count. The count of 4x registers configured in the PLC. PLC Executive ID. Displays the Executive ID reported by the PLC to the backplane. PLC Scan Rate (ms). This number is calculated by RPCSW32. The CNOE-311 keeps track of the time between end of scan hooks. Each time RPCSW32 reads this value, it adds it to the total, and averages the scan time. If there is an unreasonable number in this register, the user should zero the count by pressing "0" or "z." Keep in mind that pressing one of these keys will reset all statistics for this port. CNOE-311 Application Manual 9 Configuration Software RPCSW32 65

66 Modbus Server Routing for Ethernet Port Figure 9-12 Modbus Server Routing for Ethernet Port (Modbus/TCP only). The CNOE-311 can act as a Server as well as a Client for Modbus TCP/IP protocols. As a Server, incoming Modbus TCP/IP messages are handled in relation to the Modbus Routing table. The Destination Index of the incoming message is checked for an entry in the Modbus Routing table for the Ethernet port and if present, routes the message appropriately. This screen is selected by "edit Modbus routing" and pressing the "-" key until the Ethernet port is displayed. NOTE: Since the IP address of the CNOE-311 is unique, there is no possibility that incoming messages are intended for another device. Therefore, all incoming messages with Index values that have empty entries will be acted upon locally by the CNOE Index The Index column displays the Modbus Destination Index for which the entry corresponds. The Destination Index is a single byte of routing information with a valid range of The CNOE-311 supports all 255 entries for this index. Index 255, which would be the 256th entry, is a special drop that always refers to the CNOE-311. Messages with empty Index values will be treated as local operations. Target TYPE The target type may be set to MODBUS or OTHER. If the device is a SY/MAX device then set it to OTHER. ROUTE Ethernet I/O Scanner The Route column determines the SY/MAX route to the target device. The entries are separated by commas. The first entry should be the SY/MAX drop number of the outgoing port of the CNOE-311 (Enet or backplane). In Figure 9-12 above, incoming Modbus TCP/IP messages to Index #0 will be sent to the PLC. This is the default setting. The route may be changed, but must be the drop number of the backplane port in order to send messages to the PLC. Messages to any other index will be handled by the CNOE-311. The CNOE-311 s Ethernet port can be set up to automatically poll other Ethernet devices. The I/O scan entries include pointers to the Remote IP address, ID (Index), Timeout (in ms), Scan Rate (in ms), Read Register space (0x, 1x, 3x, 4x) and offset for Master (CNOE-311) and slave (downstream device), Write Register space (0x, 1x, 3x, 4x) and offset for Master (CNOE-311) and slave (downstream de Configuration Software RPCSW32 CNOE-311 Application Manual

67 vice), Count, and value retention (Hold, or 0). Up to 128 entries may be specified. Figure 9-13 displays an example of the Auto-Scan edit screen. Figure 9-13 Edit Auto-Scan Table IP Address This is the IP address of the device or bridge to be polled. ID This is the device address or bridge index of the device to be polled. Timeout This value determines the timeout, in milliseconds, before the CNOE-311 expires the operation. Scan Rate This value determines how often, in milliseconds, the CNOE-311 will poll the device. Register Space This column precedes the Master and Slave columns for both Read and Write. Although this column has no heading, it allows the user to choose the register space in the device to be polled. Valid choices are 0x, 1, 3x, and 4x. Default is 4x. Press the space bar to toggle, or press 0, 1, 3, or 4 to select. Master (Under Read or Write) This value determines the mailbox register in the CNOE-311 that is the starting register for the operation. The valid range is 1 through A value of 0 disables the I/O scan entry. Slave (Under Read or Write) This value determines the register in the Peripheral device that is the starting register for the operation. The valid range is 1 through A value of 0 disables the I/O scan entry. Cnt (Under Read or Write) The Count field determines the number of consecutive registers moved in the operation. The valid range is 0 through 120. A value of 0 disables the Auto-Scan entry. CNOE-311 Application Manual 9 Configuration Software RPCSW32 67

68 H/0 Outgoing TCP Routing This setting is set to HLD or 0, depending on the desired function. If set to HLD, the CNOE-311 will hold the value of the last read when the next read times out. If set to 0, the CNOE-311 will reset the register to 0 if a timeout occurs. NOTE: If a read and a write are configured in the same I/O scan entry, the CNOE-311 will use Modbus opcode 23, or x17, to issue a read/write in the same message. If the downstream device does not support this opcode, the the user must configure the reads and writes in separate entries. (Modbus/TCP and MBTCP+SY/MAX only) The "edit Tcp routing" screen allows editing of the table that maps SY/MAX drop numbers (0-199) to IP addresses. The drop in the route following that of the Ethernet port of the CNOE-311 is used as an index in this table to point to a specific IP device. Figure 9-14 Edit TCP Routing Drop The Drop entry refers to the SY/MAX drop number 0 through 199. IP Address The IP Address is the dotted decimal representation for the target server. Downstream Route The Downstream Route is an optional additional route that is added after the index drop number and may be up to one layer deep in Modbus/TCP Configuration Software RPCSW32 CNOE-311 Application Manual

69 Offline Functions "Read from disk to memory" This function reads an CNOE-311 configuration file into the offline memory. The file should have been created by the "Write from memory to disk" function described below and must have a.rpc extension. When "Read from disk to memory" is selected, a window will open and ask for the name of the file to read. The bottom part of the screen will show a list of all files with the extension.rpc in the current directory. Any subdirectories will be shown in square brackets. Any drive names will also be shown in square brackets, [b: ]. The parent directory (of which the current directory is a subdirectory) is shown by the word "parent" in square brackets. You may either type the name of the file to read, or you may use the arrow keys to move the highlight to the desired filename. Pressing ENTER with the highlight on a filename will select that file for reading. Pressing ENTER with the highlight positioned on a directory (drive) name (either a subdirectory or [parent]) will change the current directory (drive) to that directory (drive) and will show the.rpc files in the new directory (drive). If there are more files than will fit on the screen, pressing the right arrow with the highlight at the right edge of the screen will scroll the display sideways to show more files. Typing the ESC key will return to the offline function menu without loading a file or otherwise modifying offline memory. Figure 9-15 offline Read from Disk to Memory "Write from memory to disk" This function saves a copy of the two ports, the I/O scan table, and global configuration parameters from the offline memory to a disk file. "Write from memory to disk" uses the same point and shoot file selection described for "Read from disk to memory" above. To create a new file you must type the name. The name should be a valid MS/DOS filename (containing no more than eight characters, and no spaces) but should not include any path name or extension. The program will append an extension of.rpc to the name and the file will be placed in the directory which is shown in the bottom half of the screen. To create a file in a directory other than the current one, use the arrow and ENTER keys to traverse the directory tree until a listing of the desired directory is shown in the bottom half of the screen. Then type in the file name and press ENTER. If you specify (either by typing or by pointing) a file that already exists, you will be prompted for approval before that file is overwritten. "Edit configuration in memory" Just like the online portion of the program, this function displays a screen with the parameters for a CNOE-311 s ports. As described above, changes here effect the offline memory and not any attached CNOE-311. CNOE-311 Application Manual 9 Configuration Software RPCSW32 69

70 Utilities "Edit Modbus routing" Just like the online portion of the program, this function displays a screen with the parameters for a CNOE-311 s Ethernet port s routing. As described above, changes here effect the offline memory and not any attached CNOE-311. "Edit ethernet I/O scan table" Because it would not be desirable to inadvertently change an I/O scan entry in the middle of the scan, all editing of the I/O scan table is done offline. The editing is as described above. "Edit TCP routing" Just like the online portion of the program, this function displays a screen with the parameters for a CNOE-311 s Ethernet port s TCP routing. As described above, changes here effect the offline memory and not any attached CNOE-311. "Send memory to module" This function will send the configuration in memory to the CNOE-311 module by way of the serial setup parameters. In order to send the configuration to the CNOE-311 it is necessary for the personal computer to communicate with the CNOE-311. Try going online before sending a configuration. Be cautious when sending a configuration. Go online and notice IP Address and protocol the module s Ethernet port. Examine the configuration before sending to make sure that the IP address and protocol not change from the current settings, otherwise communication may be lost during the send. "Fetch memory from module" Use this function when you wish to copy the configuration parameters from a connected CNOE-311 module to the offline memory for editing, printout, or saving on disk. "Print configuration in memory" This function will produce a report showing the settings of all parameters in offline memory. When this function is selected, you will be prompted for an output filename with the default value of PRN shown. To send the report to the PRN device (normally the parallel printer port), simply press EN- TER. To send the report to a different port or to a file, type the name and then press ENTER. Online configurations may be printed with the F1 print screen key. "Delete configuration file" This function will show a point and shoot menu of the available.rpc configuration files. Select the file to be deleted and press ENTER. "Quit offline functions" Selecting the quit item will cause a return to the main menu bar. Pressing the ESC key will have the same effect. The Utilities menu provides access to useful maintenance and testing functions of the RPCSW32 software. View registers Selecting the View registers menu item will invoke a SY/MAX register data viewer/modifier. This viewer continuously performs a block read of 20 registers and displays the contents of those registers in hex, unsigned integer, signed integer, and binary. The status register associated with the data register is also displayed in hex. Like any other online or offline function involving communication, the register viewer is dependent on the values located in the SETUP Serial menu. Mode, IP address, etc. must be properly set for proper communication Configuration Software RPCSW32 CNOE-311 Application Manual

71 SETUP Figure 9-16 View Registers The Up and Down arrow keys are used to move from register to register. The Page Up and Page Down keys move in increments of 10 registers. The Left and Right arrows move from column to column on the same register. Pressing the F9 key will present the Serial setup window. This is useful for changing the route or other parameters without returning to the main menu. This register viewer is highly useful in that it allows easy editing of the data in the register being viewed. By pressing 0..9 in the decimal fields or 0..9, or A..F in the hex field, an editing mode is entered. New data may be entered at this time. Pressing the Enter key or moving to a new field with the arrow keys will cause the new data to be written to the edited register. If the curser is located in the REGISTER column the block of registers being viewed may be adjusted by entering a new register number. To edit the binary values, press HOME when on the binary field. Move the cursor to the desired bit and enter a 0 or a 1 and press enter to accept. Pressing Esc will exit from the Register viewer and return to the main menu. Pressing Esc while editing a data field will result in canceling the edit and the modified data will not be written to the register. The setup menu accesses the setup parameters for the personal computer to enable it to communicate with the CNOE-311. The parameters chosen will depend on the exact equipment involved in making the connections. Since the CNOE-311 will most likely be configured directly over ethernet, we will focus on those parameters. Serial SETUP The connection type is mainly determined by the method of connection to outside world and may be broken into two groups: the personal computer s COM: port, and the Network Interface Card. CNOE-311 Application Manual 9 Configuration Software RPCSW32 71

72 Personal Computer COM: port Since this will most likely not be used, it is not discussed in this manual. Modbus/TCP Connection RPCSW32 provides support of Modbus/TCP via Ethernet directly using the TCP/IP stack of the Windows 95/98/NT/2000/ME/XP operating system. Figure 9-17 MODBUS/TCP Setup Screen HOST - Enter the dotted-decimal IP address of the CNOE-311 such as If the CNOE- 311 has been assigned a name by a DNS server then the name may be entered such as cnoe1.niobrara.com. PORT - Enter the TCP/IP Port number used by the server. Normally this is 502. TIMEOUT - Enter the timeout value that RPCSW32 waits for a reply in 1/10 second intervals. 500 means 5 seconds. TRAP ERRORS - When set to yes RPCSW32 will stop on all errors and wait for the user to press F10 before continuing. DROP - Enter the Destination Index value to determine the target device. Use 255 when attempting to communicate with the CNOE-311 itself. CNOE-311 Application Manual 9 Configuration Software RPCSW32 72

73 Register Viewer Setup The Register Viewer Setup allows an individual setup for the operation of the Utility Register Viewer. Figure 9-18 Terminal Emulator Setup Screen Priority - This setting has no effect when connecting Modbus/TCP. Status Registers - This setting is not useful for the CNOE-311. Screen Size - Selects the number registers to be read per operation and displayed on the screen. The valid range is 1 through 20 inclusive. The default value is 20. Starting Register - The starting register value determines the first register polled when the register viewer is entered. The valid range is 1 through 8192 inclusive with the default value of 1. Identify Module - This option determines if the register 8188 is read in the target device to determine the SY/MAX ID of the target. This setting is not very useful, as all NR&D products return a value of x9990. The default value is NO. Load from File Command Line Parameters The Load from File option allows the user to select from multiple SY/MAX setups. Simply enter the filename of the setup desired and RPCSW32 will use that setup. RPCSW32 always saves the current setup as RPCSW.STP regardless if a new setup has been loaded. The idea is that you configure the setup as you like, save it to RPCSW.STP by selecting Y for yes when prompted, quit RPCSW32 to DOS, and copy RPCSW.STP to a new filename with the extension.stp. The following DOS command copies the RPCSW.STP to a new name RPC01.STP: C:\RPC> copy mebsw.stp meb01.stp RPCSW32may be started from the DOS command line with a sequence of letters which represent the keystrokes necessary to perform any operation. This allows batch processing of various commands such as downloading of stored setup files. The special characters /R, /D, and /E refer to the Return key, Delete key, and Escape key respectively. The parameters are not case sensitive. The following example loads a new SY/MAX setup RPC01.STP, to perhaps change the route to the RPC, loads the configuration file TEST.RPC into a CNOE-311, then quits. It is assumed that the CNOE-311 is connected to the computer and the rest of RPCSW32 setup is correct. >RPCSW32 SLmeb01/RFRtest/RFSQ The S selects Setup, the L selects Load setup file, meb01 is the filename of the setup, /R is the return to accept the filename, the F is for offline, the R is to Read a configuration file, test is the filename, /R is CNOE-311 Application Manual 9 Configuration Software RPCSW32 73